Security Engineer I — Application Security (Remote)

Trail of Bits; Northern (KY); Remote; USD 100,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with match

Remote-first culture

Relocation assistance to NYC

Working-from-Home stipend

Learning & Development stipend

Team celebrations

Job summary

Trail of Bits is seeking a Security Engineer I for its Application Security practice. You will contribute to client security assessments, partner with experienced engineers, identify vulnerabilities across app and system levels, and own scoped portions of engagements.

You will build tools, model threats, and communicate results to clients. This early-career role emphasizes hands-on code security work, with direction from a project lead and opportunities to grow in vulnerability research and

Qualifications

• At least 1 year of relevant experience in application security or vulnerability research.
• Proven vulnerability-discovery ability with demonstrable work.
• Strong code-analysis skills and ability to read unfamiliar code.
• Hands-on experience in two or more languages (Rust, Go, C, C++, Python, JS/TS).
• Familiarity with memory-corruption vulnerabilities and mitigations.
• Ability to investigate scoped problems and document evidence clearly.

Responsibilities

• Lead the review of a component, module, or system within a client engagement.
• Find and validate vulnerabilities; explain exploitation paths and impact.
• Design and build security-testing tooling for detection and analysis.
• Review software architectures; identify attack surfaces and data flows.
• Translate findings into actionable remediation guidance for engineers.
• Contribute to security research, open-source tools, and knowledge sharing.

Skills

Vulnerability research

Code analysis

Programming languages

Threat modeling

Security tooling

Client communication

OS concepts

Memory safety

Independent work

Written communication

Job description

Trail of Bits is seeking a Security Engineer I for its Application Security practice. You will contribute to client security assessments, partner with experienced engineers, identify vulnerabilities across app and system levels, and own scoped portions of engagements.

You will build tools, model threats, and communicate results to clients. This early-career role emphasizes hands-on code security work, with direction from a project lead and opportunities to grow in vulnerability research and